For the situational awareness of cyberspace security, Fan Yuan believes that it is to acquire, understand, display and predict the elements of network state change. Specifically, first, it has the ability to collect all factor data. Because of the obvious imbalance between attack and defense in the face of the threat of network security, it is necessary to have the ability to collect each piece of data, otherwise missing any piece may lead to major problems.
The second is the ability of all-round perception and detection. There are two core elements here, namely, the ability element and the performance element. The third is APT (high persistent threat) deep traffic analysis ability. For example, a high-frequency attack of Trojan virus was found in a city, and it was quickly located by ATP analysis. Finally, an illegal black gang composed of three people was seized.